Rego API: add option to allow bundle to own all roots except defined

[anderseknert]

Bundles currently own the roots they've defined, or all roots if none have been provided. Some tools extending OPA embed a bundle of their own to e.g. provide Rego rules and functions as an embedded library. This easily creates conflicts if the same tool loads user provided policy directories as bundles unless these have provided .manifest files where non-conflicting bundle roots are defined. For this scenario, it would be helpful if the Rego API allowed a mode where defined bundle roots had precedence, but where a bundle loaded without defined roots instead of trying to claim all roots would claim all roots not previously defined.

If there are better ways to do this available already, that would be even better :)

[stale]

This issue has been automatically marked as inactive because it has not had any activity in the last 30 days. Although currently inactive, the issue could still be considered and actively worked on in the future. More details about the use-case this issue attempts to address, the value provided by completing it or possible solutions to resolve it would help to prioritize the issue.